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Question: 1 


An administrator wants to provide users restricted access. The users should only be able to perform 
the following tasks: 

Create and consolidate virtual machine snapshots 

Add/Remove virtual disks 

Snapshot Management 

Which default role in vCenter Server would meet the administrator's requirements for the users? 


A. Virtual machine user 

B. Virtual machine power user 

C. Virtual Datacenter administrator 
D. VMware Consolidated Backup user 


Answer: B 


Question: 2 


Which two roles can be modified? (Choose two.) 


A. Administrator 

B. Network Administrator 
C. Datastore Consumer 
D. Read-Only 


Answer: B, C 


Question: 3 


An administrator with global administrator privileges creates a custom role but fails to assign any 
privileges to it. 
Which two privileges would the custom role have? (Choose two.) 


A. System.View 

B. System.Anonymous 
C. System.User 

D. System.ReadOnly 


Answer: A, B 


Question: 4 
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An administrator wishes to give a user the ability to manage snapshots for virtual machines. 
Which privilege does the administrator need to assign to the user? 


A. Datastore.Allocate Space 

B. Virtual machine.Configuration.create snapshot 
C. Virtual machine.Configuration. manage snapshot 
D. Datastore.Browse Datastore 


Answer: A 


Question: 5 


An object has inherited permissions from two parent objects. 
What is true about the permissions on the object? 


A. The common permissions between the two are applied and the rest are discarded. 
B. The permissions are combined from both parent objects. 

C. No permissions are applied from the parent objects. 

D. The permission is randomly selected from either of the two parent objects. 


Answer: B 


Question: 6 


What is the highest object level from which a virtual machine can inherit privileges? 


A. Host Folder 

B. Data Center 

C. Data Center Folder 
D. VM Folder 


Answer: C 


Question: 7 


Which three Authorization types are valid in vSphere? (Choose three.) 


A. Group Membership in vsphere.local 
B. Global 

C. Forest 

D. vCenter Server 

E. Group Membership in system-domain 


Answer: A, B, D 


Question: 8 
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Which three components should an administrator select when configuring vSphere permissions? 
(Choose three.) 


A. Inventory Object 
B. Role 

C. User/Group 

D. Privilege 

E. Password 


Answer: A, B, C 


Question: 9 


In which two vsphere.local groups should an administrator avoid adding members? (Choose two.) 


A. SolutionUsers 

B. Administrators 
C. DCAdmins 

D. ExternalPDUsers 


Answer: A, B 


Question: 10 


An administrator has configured three vCenter Servers and vRealize Orchestrator within a Platform 
Services Controller domain, and needs to grant a user privileges that span all environments. 
Which statement best describes how the administrator would accomplish this? 


A. Assign a Global Permission to the user. 

B. Assign a vCenter Permission to the user. 

C. Assign vsphere.local membership to the user. 
D. Assign an ESXi Permission to the user. 


Answer: A 


Question: 11 


Which two methods are recommended for managing the VMware Directory Service? (Choose two.) 


A. Utilize the vmdir command. 

B. Manage through the vSphere Web Client. 

C. Manage using the VMware Directory Service. 
D. Utilize the dc rep command. 


Answer: A, B 
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Question: 12 


What are two sample roles that are provided with vCenter Server by default? (Choose two.) 


A. Virtual machine User 

B. Network Administrator 

C. Content Library Administrator 
D. Storage Administrator 


Answer: A, B 


Question: 13 


Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose 
three.) 


A. CIM Server 

B. Single Sign-On 

C. Direct Console UI 

D. Syslog Server 

E. vSphere Web Access 


Answer: A, C, D 


Question: 14 


An administrator would like to use the VMware Certificate Authority (VMCA) as an Intermediate 
Certificate Authority (CA). The first two steps performed are: 

Replace the Root Certificate 

Replace Machine Certificates (Intermediate CA) 

Which two steps would need to be performed next? (Choose two.) 


A. Replace Solution User Certificates (Intermediate CA) 

B. Replace the VMware Directory Service Certificate (Intermediate CA) 
C. Replace the VMware Directory Service Certificate 

D. Replace Solution User Certificates 


Answer: A, C 


Question: 15 


Which three options are available for ESXi Certificate Replacement? (Choose three.) 


A. VMware Certificate Authority mode 
B. Custom Certificate Authority mode 
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C. Thumbprint mode 
D. Hybrid Deployment 
E. VMware Certificate Endpoint Authority Mode 


Answer: A, B, C 
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